|
|
The most common myth about restoring files with a command is -
"CHKDSK ?: /F".
The NTFS file system is declared as a recoverable file system.
However, its recoverability mechanism is designed only for the preservation of system information of the file system,
that is, directories, security attributes, cluster occupancy bitmap and other system data.
|
The safety of user files that were being worked with at the time of the failure is not guaranteed.
To increase the performance of the NTFS file system, the so-called disk cache is used.
This is the area in the computer's RAM where all changes to files, directories and the control system are saved.
information. And only after some time this information is written to the disk drive.
However, such caching increases the risk of file system destruction. In such conditions, NTFS provides
fault tolerance using transaction logging technology and system information recovery.
User data that is in the disk cache at the time of the crash and did not have time to be written
to disk is irretrievably lost in NTFS.
Operations with file system control structures are logged in NTFS.
That is , operations with control elements of file structures when performing the following operations
with files and folders:
- adding;
- renaming;
- moving;
- creature;
- deletion;
- defragmentation.
However, NTFS does not log changes to the contents of the files themselves, which in practice can lead to fatal
loss of user data.
It follows from this that the safety of data in NTFS cannot be guaranteed in full.
As part of the system utilities of the WINDOWS operating system, there is a special utility CHKDSK.
It is designed to maintain the correctness of the file structures of the operating system and
consists of a sequence of the following steps:
- 1. Checking the basic structure of file records FILE Record of the MFT table.
- 2. Checking the links of file names, controlling the indexes of the binary directory tree.
- 3. Checking security descriptors and access rights to files and directories.
If the /R parameter is set, then two more steps are performed:
- 4. Search for corrupted clusters in user file data.
- 5. Search for damaged and free clusters.
The main misconception of most users is that they believe that the utility
CHKDSK is designed to recover lost or misplaced files.
In fact, the task of the utility is to bring the file system of the drive into the correct
state.
Attention! This is done by deleting conflicting indexes and file records FILE Record!
This utility perfectly copes with restoring the operability of the operating system in case of accidental
computer failures, since the file system is successfully cleaned of the resulting garbage and unnecessary
temporary files. However, under some circumstances related to physical failures of the sector
space of information carriers, actual indexes and file records
of user files become conflicting. Which leads to fatal consequences up to the complete destruction
of the media file system. Considering that there are not many such cases, for the bulk of the rank and file
users' information about them is lost in the mass of enthusiastic relationships and miraculous healings
of their data by launching the utility with the automatic "recovery" parameter - "/F'.
To avoid possible negative consequences of running the utility CHKDSK
it is necessary to prevent it from automatically starting windows on reboot.
The system issues a warning before starting that
the CHKDSK utility will be launched in a few seconds. In response to this request, press the space bar,
and the launch of the utility will be canceled. Immediately after starting windows, the user should run
the CHKDSK utility, specifying only the letter of the corresponding logical disk.
No other parameters need to be specified. In this case, the utility will run in
diagnostic mode without attempting to correct the errors found. If the errors found do not
affect vital data, you can restart the utility in the automatic
error correction mode.
|
|
